This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File:                     F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier:          9fEuNWvaMGuIABWMjUcbi0UTMylN4WM4EFaYV9tJt1s=
Subject key identifier:   BC:04:28:FA:71:9B:44:53:E8:2D:73:FE:BB:D5:8E:35:6D:FC:68:02
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       3A6097EE6C1C2EB68E51505A05A0B12CA8174812
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number:          0555
Signing time:             Mon 02 Feb 2026 07:31:11 +0000
Manifest this update:     Mon 02 Feb 2026 07:26:11 +0000
Manifest next update:     Thu 05 Feb 2026 10:18:11 +0000
Files and hashes:         1: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=)
                          2: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=)
                          3: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: YHfOb3XSEMDVEIcVfiAIW6kLWlhlW9/hxOsVCiJWMDg=)
                          4: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: Uw6XjMedToyLxDUAACOJDrKcf3uVZDuaLHkEzLGGEMg=)
                          5: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=)
                          6: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=)
                          7: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=)
                          8: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=)
                          9: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: AZYO50pcht7zbgRleVLHSfxxSeX3cLrYkpQk4y4IB8g=)
                          10: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=)
                          11: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=)
                          12: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: 9ttsEv8xyQdIj2ysOYcOeKd2yqYa6sGhfUajffTzKd4=)
                          13: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=)
                          14: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: HhAj5FXKG+WPBMJHSmfCQ5YyDXmhJH0Hqke8PTIqGvE=)
                          15: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=)
                          16: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=)
                          17: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:60:97:ee:6c:1c:2e:b6:8e:51:50:5a:05:a0:b1:2c:a8:17:48:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Feb  2 07:26:11 2026 GMT
            Not After : Feb  5 10:18:11 2026 GMT
        Subject: CN=BC0428FA719B4453E82D73FEBBD58E356DFC6802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:9c:42:ed:19:ca:36:61:86:cb:b8:11:ce:
                    8a:06:5f:dd:b4:d3:a1:9f:ca:6a:d1:ec:a7:73:78:
                    a4:02:ca:5e:87:9b:6d:68:cc:0b:15:6b:78:4c:d6:
                    ff:c7:71:12:16:4c:ae:38:24:54:70:a6:69:6d:e3:
                    de:0a:25:30:33:4a:54:64:ff:08:d3:68:5e:78:c5:
                    8e:14:35:ba:af:0c:c9:63:69:db:1e:9b:e2:48:c9:
                    d6:4f:cb:5d:a2:eb:c5:29:58:5e:21:cb:ef:ae:a9:
                    81:14:f6:43:86:1f:a6:ed:28:43:4e:7f:ef:45:81:
                    07:25:22:94:73:82:12:20:01:da:97:4d:43:1c:7a:
                    c5:ce:8a:9b:bc:1d:aa:5a:f3:10:33:98:c4:12:1e:
                    6f:9c:d6:2c:d2:66:55:6f:6d:90:f2:d6:77:61:16:
                    31:08:57:96:fd:39:9e:a2:a2:19:0c:b6:9f:32:74:
                    70:14:06:67:23:4d:62:f5:09:96:f3:f2:1b:fe:1b:
                    4c:46:d2:07:80:72:50:a1:aa:d4:f8:7c:84:61:84:
                    89:60:64:e9:a9:f4:a7:7f:8c:2e:2f:6d:0a:3f:8c:
                    4b:fa:2c:b7:a1:f9:f5:9f:ca:ba:6c:5c:f8:5d:f8:
                    eb:ca:e4:00:4f:d3:6d:bc:3d:9e:b5:8c:dd:45:0c:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:04:28:FA:71:9B:44:53:E8:2D:73:FE:BB:D5:8E:35:6D:FC:68:02
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:a5:96:e7:9a:68:50:47:0a:78:32:89:ea:79:28:53:ca:
         02:6e:fd:dd:8d:53:e8:c6:6f:f1:06:15:cd:17:b9:af:af:cc:
         78:3c:bf:a8:db:87:db:7c:59:b9:a8:9f:85:28:06:74:f1:e1:
         3d:d1:b1:59:58:bf:cd:74:99:ac:f0:a0:b9:78:74:c7:58:f1:
         7f:d6:63:ff:59:2e:a7:74:45:52:a2:68:29:f1:95:9c:0b:c3:
         9e:21:e4:51:e0:d6:ed:2f:cd:7b:1f:81:d0:b3:62:80:95:03:
         01:c1:bf:ec:f5:51:27:c0:64:25:2e:ee:de:43:e1:52:d1:c7:
         52:37:7b:1e:b7:92:43:c6:20:36:73:16:e0:50:d4:81:af:09:
         df:af:fa:6f:c0:be:6e:3d:95:91:ce:b0:b7:6c:93:4e:51:b6:
         f3:14:f0:10:15:16:6a:5f:0a:9d:21:6d:4f:02:78:86:b7:ae:
         1c:e8:35:49:16:30:87:c1:cc:cb:d7:52:25:9c:82:96:83:e3:
         47:c8:5c:2a:eb:c6:c3:43:28:c3:e7:60:0f:a8:05:d0:1e:9c:
         1c:9a:f2:4b:b2:12:12:85:83:69:14:b8:fc:ff:ac:eb:3f:2b:
         12:5b:33:bb:69:d3:cc:9c:6b:62:35:ff:1d:3e:13:ff:85:5a:
         43:33:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:15 2026 by rpki-client